What *are* they smoking?

Matthew S. Hallacy poptix at techmonkeys.org
Mon Sep 15 23:45:08 UTC 2003


On Tue, Sep 16, 2003 at 01:18:26AM +0200, Jeroen Massar wrote:
> 
> Even worse of this is that you can't verify domain names under .net
> any more for 'existence' as every .net domain suddenly has a A record
> and then can be used for spamming...
> 
> From: Spammer <i at spam.using.verisign.eventhoughthisdomaindoesntexist.net>
> To: You <spamtarget at example.com>
> 
> Thank you Verisign! Now we need to check for existence of an MX
> and then just break a couple of RFC's in the process :(

Checking for NS or SOA record(s) is sufficient, neither are being returned,
only A records.

Of course, you could just block anything that resolves to netsol.

-- 
Matthew S. Hallacy                            FUBAR, LART, BOFH Certified
http://www.poptix.net                           GPG public key 0x01938203
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030915/f5a57f71/attachment.sig>


More information about the NANOG mailing list